Data Protection Report

NOVEMBER 8, 2023

On November 1, 2023, the New York Department of Financial Services (“NYDFS”) released the finalized amendments of Part 500 of its cybersecurity regulations. Class A companies are specifically required to: – conduct independent audits of their cybersecurity program based on their risk assessment (500.2(c));

Financial Services 111

Financial Services Cybersecurity Compliance Government 111

Thales Cloud Protection & Licensing

APRIL 29, 2024

The Evolving Legislative and Compliance Landscape: A Roadmap for Business Leaders madhav Tue, 04/30/2024 - 05:32 Trust is the currency of the digital economy. Comprehensive cybersecurity legislation is imperative to build and maintain confidence in the future and ensure a secure digital landscape.

Compliance 71

Compliance Cybersecurity Risk Manufacturing 71

Thales Cloud Protection & Licensing

JANUARY 11, 2023

The Most Popular Data Security Webinars of 2022: Sovereignty, Cloud Security and Compliance Top the List. Trends in Cloud Security: Key Findings from the 2022 Cloud Security Study. Along with this shift, security challenges have changed and increased, and are top of mind for IT teams and security professionals.

Compliance 83

Compliance Cloud Security Financial Services 83

IBM Big Data Hub

NOVEMBER 7, 2023

Recent advances in areas like AI and quantum computing offer transformative potential for businesses, but may also bring new risks and security challenges. Embracing an industry framework for security and compliance IBM Cloud Object Storage is a cloud service for storing large volumes of data.

Cloud 82

Cloud Financial Services Security Compliance 82

The Last Watchdog

AUGUST 22, 2019

A core security challenge confronts just about every company today. While the benefits of DX are highly-touted , this shift has also spawned a whole new tier of unprecedented privacy and security challenges. The cloud is kind of dragging this movement along and DevOps and security are center stage, at the moment.”

Digital transformation 147

Digital transformation Compliance Risk Security 147

Thales Cloud Protection & Licensing

NOVEMBER 4, 2020

Financial Services Organizations Need to Adapt their Security Practices to the Shifting Environment. Even “traditional banks” seek to drive more revenue from digital products, personalized services and experiences. At the same time, financial services organizations need to adapt to a shifting global environment.

Financial Services 62

Financial Services Security Digital transformation Encryption 62

Rocket Software

MARCH 14, 2022

Analyst firm IDC recently published a Vendor Spotlight report featuring ASG Mobius Content Services (Mobius) and its applications in the financial service and insurance industries. Going forward, businesses need to fill these gaps with the right solutions to manage critical information assets securely and effectively.

Financial Services 82

Financial Services Insurance Digital transformation Paper 82

HL Chronicle of Data Protection

APRIL 17, 2020

Continuing its focus on COVID-19’s impact on its regulated entities, on April 13, the New York Department of Financial Services (NYDFS) released new cybersecurity guidance in response to the COVID-19 pandemic. Third Party Risk. Remote Working. Third-party vendors may struggle to deal with COVID-19 restrictions.

Financial Services 75

Financial Services Risk Cybersecurity Phishing 75

Thales Cloud Protection & Licensing

SEPTEMBER 18, 2023

Compliance madhav Tue, 09/19/2023 - 05:17 It is essential for any business that stores, processes, and transmits payment card information to comply with the Payment Card Industry Data Security Standard (PCI DSS). Consumers’ payment data is a compelling target for criminals who continue to circumvent IT security defenses.

Compliance 77

Compliance Financial Services Data breaches Encryption 77

Hunton Privacy

NOVEMBER 23, 2022

On November 9, 2022, the New York Department of Financial Services (NYDFS) released its second, proposed amendments to the Part 500 Cybersecurity Rule. Penetration Testing, Vulnerability Assessments and Risk Assessments. Revised Definition of Class A Companies. Cybersecurity Plan.

Financial Services 55

Financial Services Cybersecurity Ransomware Compliance 55

IT Governance

NOVEMBER 23, 2023

The financial sector is quite heavily regulated, and involves a lot of confidential data. You’d therefore expect that the sector fares better at data security than your average organisation. Perhaps even more concerning to EU lawmakers is how dependent society at large is on banking and other financial services.

Risk 104

Risk Data breaches Authentication Financial Services 104

eSecurity Planet

FEBRUARY 11, 2022

Risk management is a concept that has been around as long as companies have had assets to protect. Risk management also extends to physical devices, such as doors and locks to protect homes and vehicles, vaults to protect money and precious jewels, and police, fire, and CCTV to protect against other physical risks.

Risk 145

Risk Cybersecurity Encryption Access 145

IT Governance

AUGUST 26, 2021

A new approach to work requires careful consideration – and one of your biggest concerns should be your compliance posture. This might be fine if your only concern is productivity, but if you also have regulatory compliance challenges, you may feel compelled to install such software. Protecting employees’ privacy.

Compliance 119

Compliance Data breaches Privacy Risk 119

eSecurity Planet

JANUARY 21, 2021

Governance, risk, and compliance (GRC) software helps businesses manage all of the necessary documentation and processes for ensuring maximum productivity and preparedness. It includes multi-disciplinary risk and compliance management solutions and tools, including: IT & security risk management.

Compliance 57

Compliance Risk Government Retail 57

IBM Big Data Hub

MARCH 20, 2024

Organizations in the financial services, healthcare and other regulated sectors must place an even greater focus on managing risk—not only to meet compliance requirements, but also to maintain customer confidence and trust. Similarly, in the U.S.

Cloud 73

Cloud Financial Services Risk Business Services 73

Data Matters

AUGUST 19, 2020

On July 21, 2020, the New York State Department of Financial Services (NYDFS or the Department) issued a statement of charges and notice of hearing (the Statement) against First American Title Insurance Company (First American) for violations of the Department’s Cybersecurity Requirements for Financial Services Companies, 23 N.Y.C.R.R.

Financial Services 68

Financial Services Cybersecurity Insurance Risk 68

Data Matters

FEBRUARY 10, 2021

On February 4, 2021, the New York Department of Financial Services (NYDFS) issued Circular Letter No. 2 announcing a Cyber Insurance Risk Framework (the Framework) that describes industry best practices for New York-regulated property/casualty insurers. Insurers should: Establish a Formal Cyber Insurance Risk Strategy.

Insurance 79

Insurance Financial Services Cybersecurity Risk 79

IBM Big Data Hub

AUGUST 10, 2023

By prioritizing resiliency, performance, security and compliance, fintechs are helping to revolutionize the way financial services are delivered. Furthermore, they should consider how they are keeping their data secure and compliant, especially given the evolving security-threat landscape and regulatory concerns.

Cloud 65

Cloud Financial Services Artificial Intelligence Digital transformation 65

IBM Big Data Hub

OCTOBER 10, 2023

Cyber risk is preeminent in today’s threat landscape, and that includes attacks on the software supply chain. These are referred to as supply chain risks, and they include vulnerable code that may be included from open source or third parties. Read more about the DevSecOps toolchains here.

Cloud 73

Cloud Financial Services Compliance Risk 73

IBM Big Data Hub

SEPTEMBER 18, 2023

At the same time, we are increasingly seeing regulators more closely monitor the industry’s relationship with non-traditional players (such as fintechs and neobanks), aimed at mitigating the introduction of potential risks into the financial services ecosystem.

Customer Experience 69

Customer Experience Financial Services Cloud Compliance 69

Hunton Privacy

JUNE 9, 2022

515 , making Vermont the twenty-first state to enact legislation based on the National Association of Insurance Commissioners Insurance Data Security Model Law (“MDL-668”). Information Security Program Requirements. On May 27, 2022, Vermont Governor Phil Scott signed H.515

Insurance 107

Insurance Security Information Security Cybersecurity 107

The Last Watchdog

JULY 11, 2023

Related: Preserving the privacy of the elderly As more traders and investors engage in these investment avenues, it is crucial to adopt robust security measures to safeguard sensitive and regulated information. Encryption renders data unreadable to unauthorized individuals, significantly reducing the risk of data breaches.

IT 189

IT Encryption Risk Financial Services 189

IBM Big Data Hub

DECEMBER 4, 2023

The Digital Operational Resilience Act (DORA) is a landmark piece of legislation in the European Union (EU) that is designed to help fortify the operational resilience of the financial sector, making it fit for purpose in the digital age. On the surface, this might seem to complicate matters.

Financial Services 86

Financial Services Compliance Risk Business Services 86

IBM Big Data Hub

AUGUST 1, 2023

We are bringing the power of foundation models with the availability of a GPU as a service on IBM Cloud offering to help organizations tap into artificial intelligence (AI) in a secured environment while aiming to mitigate third- and fourth-party risk.

Financial Services 63

Financial Services Computer and Electronics Cloud Digital transformation 63

The Last Watchdog

JANUARY 30, 2019

Turn the corner into 2019 and we find Citigroup, CapitalOne, Wells Fargo and HSBC Life Insurance among a host of firms hitting the crisis button after their customers’ records turned up on a database of some 24 million financial and banking documents found parked on an Internet-accessible server — without so much as password protection.

Risk 147

Risk Financial Services Insurance Cybersecurity 147

Krebs on Security

JUNE 18, 2021

In May 2019, KrebsOnSecurity broke the news that the website of mortgage settlement giant First American Financial Corp. NYSE:FAF ] was leaking more than 800 million documents — many containing sensitive financial data — related to real estate transactions dating back 16 years. First American Financial Corp.

Insurance 288

Insurance Risk Financial Services Mining 288

IBM Big Data Hub

JUNE 12, 2023

As public cloud technology and hybrid multicloud architectures are being adopted in financial institutions at an increasing rate, we’re observing that their counterparts in the public sector— central banks—are a long way behind, due at least in part to a profoundly risk-averse approach.

Cloud 85

Cloud Financial Services Digital transformation Risk 85

IBM Big Data Hub

DECEMBER 14, 2023

A cybersecurity strategy is not solely about managing risk across a business’ IT infrastructure. As enterprises scale infrastructure and systems to manage sensitive data and complex workloads, they must rely more on an ecosystem of partners to help them enhance their security and compliance without impacting performance and resiliency.

Cloud 82

Cloud Security Data breaches Cybersecurity 82

IBM Big Data Hub

DECEMBER 18, 2023

For organizations of all types—and especially those in highly regulated industries such as financial services, government, healthcare and telco—considerations including the rise of generative AI, evolving regulations and data sovereignty laws and ongoing security challenges must be top of mind.

Cloud 63

Cloud Financial Services Compliance Digital transformation 63

The Last Watchdog

MARCH 31, 2020

Related: A firewall for microservices DevSecOps arose to insert security checks and balances into DevOps, aiming to do so without unduly degrading speed and agility. If you’re thinking that speed and security are like oil and water, you’re right. For a full drill down on our discussion, please give the accompanying podcast a listen.

Security 194

Security Privacy Financial Services Risk 194

Data Protection Report

JANUARY 18, 2024

On January 3, 2024, the New York Department of Financial Services announced a consent order with GGT, where GGT agreed to pay NYDFS $8 million and to surrender its BitLicense (for cryptocurrency trading), due to alleged violations of NYDFS’ cybersecurity and its virtual currency regulations.

Cybersecurity 111

Cybersecurity Financial Services Compliance Encryption 111

IBM Big Data Hub

FEBRUARY 22, 2024

We strongly believe the influx of data associated with AI will fuel tremendous business innovations, but requires strategic considerations, including around where data resides, data privacy, resilience, operational controls, regulatory requirements and compliance, and certifications.

Cloud 73

Cloud Computer and Electronics Compliance Financial Services 73

Hunton Privacy

NOVEMBER 8, 2023

On November 1, 2023, New York Governor Hochul announced that the New York State Department of Financial Services (“NYDFS”) amended its Cybersecurity Regulation applicable to covered financial institutions. For certain other requirements, regulated entities will have between one and two years to reach compliance.

Cybersecurity 72

Cybersecurity IT Compliance Financial Services 72

IBM Big Data Hub

JUNE 5, 2024

To meet customer and regulator demands, it is critical that financial institutions are proactive and strategic about creating a cohesive strategy to modernize their payments infrastructure with resiliency and compliance at the forefront.

Financial Services 48

Financial Services Cloud Data breaches Compliance 48

Data Protection Report

AUGUST 2, 2022

Organizations should also be aware of sector-specific statutory obligations which may apply to them, for example in health or financial services industries. Risk management and mitigation. M&A and Securities law. In this post we discuss the operational advantages of a good privacy breach record-keeping program.

Compliance 137

Compliance Privacy Risk Financial Services 137

IBM Big Data Hub

APRIL 22, 2024

Modularity : Deployable architecture follows a modular design pattern, where different components or services are isolated and can be developed, tested and deployed independently. This allows for easier management and reduces the risk of dependencies causing deployment issues.

Cloud 62

Cloud Financial Services Compliance Systems administration 62

eSecurity Planet

SEPTEMBER 10, 2021

From the very beginning of the cloud computing era, security has been the biggest concern among enterprises considering the public cloud. In addition, 95 percent of survey respondents confirmed that they are extremely to moderately concerned about public cloud security. What is cloud security?

Cloud 132

Cloud Security Encryption Risk 132